AMENDMENT AND RESPONSE UNDER 37 C.F.R. § 1 .1 1 6 - EXPEDITED PROCEDURE Page 2 

Serial Number: 1 0/578,647 Dkt: 2069.059US I 

Filing Date; May 9, 2006 

Title: CONDITIONAL ACCESS METHOD AND DEVICES 



IN THE CLAIMS 
Please amend the claims as follows: 

The following listing of claims will replace all prior listings of claims in the application: 

1 . (Previously Presented) A method of providing conditional access to an encrypted data 
stream with a stream receiving device (12), the method comprising: 

- including encrypted content data, the decryption of which requires temporally changing control 

words (CW), in the data stream; 

- including first decryption control messages (ECM's) in the data stream, each first decryption 

control message (ECM) containing at least one of the control words that is required for 
decrypting content data that is substantially contemporaneous with the first decryption 
control message (ECM) in the stream; 

- including second decryption control messages (EMM's) which contain management 

information for entitling selected stream receiving devices to decrypt content data from 
the data stream using control words from the first decryption control messages (ECM's); 

- including further management information in at least part of the first decryption messages 

(ECM's); 

- extracting a control word from a first decryption message (ECM) from the stream in a stream 

receiving device (12); 

- together with said extracting, testing whether the first decryption message (ECM) contains 

further management information targeted at the sfream receiving device (12); and 

- indefinitely disabling subsequent decryption of at least part of the sfream in the sfream 

receiving device (12) upon said detection. 

2. (Original) A method according to Claim 1, wherein the sfream receiving device (12) 
contains identification information that individually identifies the sfream receiving device (12), 
said first decryption message (ECM) containing fiirther identification information, said testing 
comprising comparing the identification information and the fiirther identification information. 
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3 . (Original) A method according to Claim 1 , wherein the first encryption message (ECM) 
contains information that specifies a condition upon entitlement data, said testing comprising 
searching for entitlement data stored in said stream receiving device (12) to detect whether any 
of the searched entitlement data meets said condition, and performing the disabling if such 
entitlement data is found. 

4. (Previously Presented) A method of generating an encrypted data stream, the method 
comprising: 

- including encrypted content data, the decryption of which requires temporally changing conti-ol 

words, in the data stream; 

- including first decryption conh-ol messages (ECM's), which contain the contirol words, in the 

data stream; 

- including second decryption control messages (EMM's) which contain management 

information for entitling selected stream receiving devices to decrypt content data from 
the data stream using control words from the first decryption control messages (ECM); 
and 

- including further management information in at least part of the first decryption messages 

. (ECM's), the further management information being an-anged to target selected stream 
receiving devices ( 1 2) to indefinitely disable subsequent decryption of at least part of the 
stream in the stream receiving device (12). 

5 . (Original) A method according to Claim 4, wherein the fiirther management information 
targets the selected stream receiving devices (12) with identification information corresponding 
to individual identification information of selected stream receiving devices. 

6. (Original) A method according to Claim 4, wherein the further management information 
targets the selected stream receiving devices (12) with information that specifies a condition 
upon a content of entitiement data in said sfa-eam receiving devices. 
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7. (Original) A stream receiving device (12) for providing conditional access to an 
encrypted data stream, wherein the data stream comprises encrypted content data, the decryption 
of which requires temporally changing control words, the data stream further comprising first 
decryption control messages (ECM's), which each contain a control word, substantially 
contemporaneously with the content data that can be decrypted with that control word, and 
second decryption control messages (EMM's) which contain management information for 
entitling the stream receiving device to decrypt content data from the data stream using control 
words from the first decryption control messages (ECM's), the stream receiving device 
comprising a circuit (124) arranged 

- to extract a control word from a first decryption message from the stream, and, 

- together with said extracting, to test whether the first encryption messages (ECM's) contain 

further management information targeted at the stream receiving device (1 2), the stream 
receiving device (12) indefinitely disabling subsequent decryption of at least part of the 
stream upon said detection. 

8. (Original) A stream receiving device according to Claim 7, wherein said testing whether 
the further management information is targeted at the stream receiving device comprises 
comparing identification information from the further management information with an 
identification of the stream receiving device. 

9. (Original) A stream receiving device according to Claim 7, wherein said testing whether 
the further management information is targeted at the stream receiving device comprises 
searching for entitlement data stored in said stream receiving device (12) that meets a condition 
specified in the further management information. 

10. (Original) A smart card for use in a stream receiving device according to Claim 7, the 
smart card comprising a processor (124) and an entitlement memory (126), the processor (124) 
being programmed to 

- extract a control word from a first decryption control message (ECM) from the stream and to 
supply the control word for use in decrypting content data; 
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- update the entitlement memory using information from a second decryption control message 
(EMM); 

- together with said extracting, test whether the first encryption messages (ECM's) contain 
further management information targeted at the stream receiving device, and 

- indefinitely disable subsequent supply of control words of at least part of the stream upon said 
detection. 



11. (Previously Presented) A stream generating device for generating an encrypted data 
stream, the stream generating device comprising: 

- a source of content data, comprising an encryption unit for encrypting the content data so that 

temporally changing control words are required; 

- a source of first decryption control messages, that generates first control word messages in the 

stream containing control words for decrypting the content data; and 

- a source of access management information, that generates first control word messages in the 

stream containing management information for entitling selected stream receiving 
devices to decrypt content data, the source of access management information being 
coupled to the source of first decryption control messages, the source of first decryption 
control messages being arranged to include further management information in at least 
part of the first decryption messages, the further management inforaiation being arranged 
to target selected stream receiving devices to indefinitely disable subsequent decryption 
of at least part of the stream in the stream receiving device. 



